Method and apparatus for credit card verification

Abstract: Techniques for multiple verification of credit cards incorporating digital image information and authorization data onto a credit card to assist in the card verification process. This technique requires the authorized card holder to have a picture identification accompany the application for the card. Picture information is converted to a digital image that is stored and used in one or a plurality of means for verifying that the presenter of the card, at the point of the transaction, is the authorized user. Such means include visual comparison of card presenter and extracted digital image information and verification that the data has not been altered. Encryption of the data, as it is read from the card, at the point of origin is used to formulate encoded authorization data that is then compared against like encoded authorized card holder data stored at a centrally located data base.

Description: TECHNICAL FIELD The present invention relates to the field of credit cards and to the verification of the owner of the credit card. More particularly, the invention is directed to a method and associated apparatus for reading a credit card with a digital picture of the owner or authorized user and multiply validating the authenticity of the card. BACKGROUND OF THE INVENTION Visual verification of identity plays a role in many types of transactions and security procedures. For example, signatures, fingerprints or images of faces are compared in to establish identity. The creation of a fraudulent identities or the misrepresentation of identity results can allow individuals to commit fraud and breach security systems. One system which relies on verification of identity for transactions is the credit and charge card system. These cards are an increasingly popular means for consumers and validation requestors to complete transactions. However, part of the cost incurred from this convenience is the burgeoning growth of card fraud. In 1991 the estimated cost to the financial industry for credit card fraud was $1.58 billion. The cost of this fraud is paid for by the banking/credit industry, but it is passed to the consumer in the form of higher card interest rates and fees and to the validation requestors in the form of additional transaction commission fees. Methods used to combat this fraud have been the use of holographic images on cards, the need for validation requestors to obtain transaction approval, the encoding of cardholder information on magnetic strips on the back of the card, and signature verification. A well-known approach is to have image information available for visual verification that the card bearer is the authorized owner (see Luther G. Simjian, "Verification System using Coded Identifying and Storage Means," U.S. Patent No. 3,569,619, issued March 9, 1971) and is an important component in the present invention. A further refinement on this system is to scramble the image information (see Robert L. Nathans, "Counterfeit Proof ID Card having a Scrambled Facial Image," U.S. Patent No. 4,972,476, issued May 11, 1989). Again, the de-scrambling and reconstruction of the facial image is validated at a single location. This could be defeated by a counterfeiter who has access to the scrambling algorithm. A similar notion is to have a decryption key carried along with the credit card, either by a PIN number or other device encoded on the magnetic stripe (see Frank T. Leighton and Silvio Micali, "Method and System for Personal Identification," U.S. Patent No. 4,879,747, issued March 21, 1988.) Recently the added feature of including a digitally printed likeness of the authorized cardholder has been introduced, known commercially as the Photocard, issued by Citibank. WO-A-89/08899 describes an apparatus having processor means for reading and displaying graphic information provided by a credit card and communication means to enable communication with a remote authorization processing center. In a preferred embodiment the graphic information is a photograph of the user. All of these methods have had some initial success, though each has been or will be eventually defeated by increasingly sophisticated counterfeiting. In the case of the photographic image on the card, the initial drop in fraud, in the New York test markets, has been as high as 67%. This reduction will likely diminish in time. Other approaches have needed sophisticated equipment and/or the need for the cardholder to remember or have available special auxiliary information such as a personal identification number (PIN). As the typical consumer is estimated to carry between 8-10 credit cards, it is impractical for the consumer to remember and correctly match the PIN numbers with the proper credit card. This solution will meet with significant resistance from customers. The need for auxiliary equipment, such as scanners, video cameras, special gates and the like all will fail due to the added inconvenience to the consumer, in addition the sophisticated credit card criminal will not be deterred by such equipment. The difficulty with most methods is that there is largely a single point of card validation. In the case of the Photocard, the image only resides with the card and is checked only by a clerk at the point-of-sale. Most clerks do not check these cards, and in some instances the card is never in the possession of the clerk. In order for a verification to be successful there has to be measures which occur both at the point of sale as well as through the denial of the transaction via a slight modification in the current card approval process. SUMMARY OF INVENTION The present invention is a means of embedding image information into the card and using that information to assist in the card approval process. There are several embodiments of this invention. All of the embodiments require that the holder of a card have a picture identification to accompany the application for the card. The picture identification is converted to a digital image, and the digital data is used in one or a plurality of means for the purposes of verifying that the presenter of the card at the point of the transaction is indeed the owner. The digital image data and/or information extracted from that image data is encoded onto a medium like the magnetic stripe currently used by many cards or into an electronic storage system such as in "smart" cards. This information is used by the validation requestor at the point of sale to display a picture of the card presenter on a video monitor as a quick visual means for the validation requestor to check the validity of the account. In addition, as part of an electronic validation procedure, each validation requestor will have or be sent an identification code which determines an algorithm embedded in the card reader, which when applied to the image data encoded on the card returns a pre-approval code. The validation requestor identification code, the card account number, and the pre-approval code is sent to the card administration agency (CAA) and the same algorithm will be applied to the image information that is on file at the CAA. If the same result appears and the card account has adequate credit, then credit approval will be returned to the validation requestor. If the codes do not match, the card is assumed to be fraudulent and the request for credit is denied. Furthermore, if fraud is suspected by the validation requestor or the CAA, the image data encoded on the card is captured and transmitted to the CAA and stored for future use in criminal proceedings. The present invention is defined by the independent claims. From the foregoing it can be seen that a primary object of the present invention is the provision of a credit card that must be multiple validated. Another object of the present invention is the provision of a credit card with a digital image that has been encoded with an encryption algorithm. Yet another object of the present invention is the utilization of digital images on an image storage device such as the Kodak' Photo-CD system. It is yet another object of the invention to provide a method for transmitting the digital image representing the users' image as stored on the card to a central processing point when a validation of the card indicates a problem. Yet another object of the present invention to provide a verification image from the central processing point to the transaction site when the card is defective. The above and other objects of the present invention will become more apparent when taken in conjunction with the following description and drawings, wherein like characters indicate like parts. BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 is a block diagram illustrating the arrangement of the apparatus for performing the method of the present invention. Figure 2 is a sample facial image and an image that has undergone compression and decompression with a compression ratio that is adequate for storage on a credit card. Figure 3 is a block diagram illustrating a selection process for encryption algorithms. DETAILED DESCRIPTION OF THE INVENTION The present invention uses data taken from cardholders' photographs to be used in the validation procedure. A simple schematic of the apparatus used and the data-flow path is shown in Figure 1. The information for the image data must come from the card applicant. Upon applying for a card the applicant must submit a photograph which contains the likeness of the applicant. This unique applicant information will be known hereinafter as a photograph. The photograph is digitally scanned and converted into a digital representation of the photograph. The digital information is compressed and may also be encrypted before being stored. The location of data storage distinguishes different embodiments of the invention. In a first embodiment of the invention the image data is stored in readable digital form only on a card 10 itself. Thus, each card has image information unique to the cardholder. At the point of sale the validation requestor will use a data reading device 20 to recover the encoded information from the card and reconstitute the photograph (image) 60. An 8 bit/pixel image with a resolution of 128 x 192 pixels can be compressed to less than 8000 bits and still retain sufficient image information to make an identification possible, (see Figure 2 on which the photograph is on the left and the reconstituted image is on the right). The 128 x 192 image corresponds to the thumbnail image that is used on Kodak's Photo-CD disk. This image is then displayed on a monitor 70 for the validation requestor to determine if the photograph is a reasonable likeness to the individual's appearance. The image data is used as the input to a processor 50 which calculates the pre-approval code based upon an algorithm 52 (see Fig. 3) embedded in the algorithm table 40. A potential, but not limiting, example of an algorithm which is computationally efficient and based upon the data in the compressed image format is the extraction of a substring of bits from the image data and the application of a standard error correcting code such as Reed-Solomon to the substring to determine a string of parity bits. The algorithm can be selected by a switch 56 interposed between the algorithm table 40 and the processor 50 based on various means such as by default or a pseudo-random choice from processor 50 or 90. Moreover, as part of the electronic validation procedure, the validation requestor accesses the credit data base 30 and transmits the validation requestor identification number, which determines which algorithm the magnetic reader 20 has embedded, the credit card number, and the result of the embedded algorithm to the CAA's processor 90. The CAA recovers the data assigned to the credit card number, and processes the image data with the algorithm assigned to the validation requestor code and compares the result with the pre-approval code. The processing at the CAA, optionally, can incorporate cardholder data previously stored in storage 80 which data may be pre-computed and stored as a look-up-table which accompanies the information concerning the account. This eliminates the need to recover the digital image information for each transaction being processed, as well as speeding up the approval process. If a match is made and credit is available then an approval code is sent to the validation requestor which permits the transaction to be completed. If the pre-approval code and the code computed at the CAA do not agree, then an image of the fraudulent card holder is already available, as the validation requestor has confirmed that the card bearer has a strong likeness to the reconstituted image. The CAA can then automatically request that the image information be transmitted to them. The reconstituted image may then be forwarded to law enforcement agencies. With a compression scheme of approximately 25:1, the resulting data required is approximately 8000 bits, which requires approximately 3 seconds to transmit with a standard 2400 baud modem. ADVANTAGES The advantage of this approach is that information concerning the validity of a credit card is multiply validated, at the point of sale and at a remote and trusted site. Moreover, for the credit to be approved, the same image information would have to be held by both the CAA and the credit card holder. The algorithm to validate the card would be only held by the validation requestor and the CAA. Also, a facsimile of the credit card holder appearing for the validation requestor to corroborate the validation by the CAA would also present another deterrent to the fraudulent use of credit cards. If the image data is modified by a credit card fraud, then the information used by the pre-approval algorithm would be different than the data available to the CAA and the pre-approval algorithm would produce a different result, invalidating the card. Moreover, since the algorithm code is used randomly among validation requestors, attempting to circumvent the algorithm by a clever re-encoding would also be thwarted, making fraudulent charges much more difficult. Also, knowledge that bearers of fraudulent cards would have their images captured will also be a deterrent, much like video cameras in banks. The cost of this method is recovered by the reduction of fraudulent charges being made upon credit cards. Since this cost is borne by the CAA, the savings that result, immediately become assets of the CAA. The cost of producing the card in order to have the visual validation is approximately half of the cost to manufacture the Photocard. Another advantage is that the cardholder will not be required to carry any additional information, such as a PIN number to corroborate the validity of the card. This will make acceptance of the card easier, as the validation comes with no significant inconvenience to the consumer. The equipment necessary to perform this check will not be significantly different than that currently in place. While there has been shown what are considered to be the preferred embodiments of the invention, it will be manifest that many changes and modifications may be made therein without departing from the scope of the invention as defined in the appendent claims. It is intended, in the annexed claims, to cover all such changes and modifications as may fall within the true scope of the invention.

Claims: A credit card validation system comprising: a) a credit card (10) having digital image data recorded thereon representing the image of at least one authorized user and authorizing data; b) at a first location: 1) reader means (10) for reading the digital image data recorded on said credit card: 2) means (70) for displaying the digital image representing the authorized user: 3) algorithm means (40) for providing at least an encryption algorithm for encoding selected portions of the digital image data; 4) a first processor means (50) for encoding said selected portions of the digital image data read from said credit card with the provided encryption algorithm; 5) means to communicate digital data at a second remote location; c) at said second remote location: 1) second processor means (90) for receiving data from said first processor; and 2) storage means (80) having stored therein digital data corresponding to the authorizing data recorded on said credit card and encoded with the provided encryption algorithm, said second processor means comparing the received data from said first processor with the digital data from said storage means to provide a validation signal when a correspondence is detected; and characterized by d) means to transfer from the first processor to the second processor the digital image data recorded on the credit card and representing the image of the user so that said data could be stored at the remote location when a lack of correspondance between the data received from the first processor and the digital data from said storage means is detected. The credit card validation system according to claim 1 wherein said algorithm means provides a plurality of encryption algorithms for selective encoding portions of the digital data. The credit card validation system according to claim 2 wherein the selection of an encryption algorithm is pseudo random. The credit card verification system according to any of claims 1 to 3 wherein said second processor selects the encryption algorithm for said first processor means. The credit card verification system according to any of claims 1 to 4 wherein digital image data recorded on said credit card is in compressed form. The credit card verification system according to any of claims 1 to 5 wherein said storage means is a photographic compact disk system. A credit card validation system wherein the first location is a point-of-sale, the second location is a remote card administrative agency and the image of the authorized user is a photograph of the face of an authorized user. A method for validating a credit card comprising the steps of: a) storing digital image data corresponding to an image of an authorized credit card user on a credit card along with authorizing user data obtained by encoding selected portions of the digital image data with an encryption algorithm; b) establishing, in a card administration agency, a central data base for a multiplicity of card user wherein encoded authorized user data is stored; at a point-of-sale: c) reading the digital data recorded on said credit card; d) displaying the image represented by the digital image data; e) visually determining if a match exists between the displayed image and the credit card user; f) encoding the selected portions of the digital image data with the encryption algorithm; g) transmitting the coded data obtained in step f) to the card administration agency; at the card administration agency h) comparing the received data with stored authorized user data to determine if a match exists; and i1) either upon the existence of a match sending to the point of sale a validation signal; i2) or upon the existence of a lack of match, sending to the point of sale, an order signal so that the stored digital image data matching the image of the credit card user is transmitted to the card administration agency.

Inventors: ELLSON RICHARD N, RAY LAWRENCE A, ELLSON, RICHARD N., RAY, LAWRENCE A., ELLSON, RICHARD N., EASTMAN KODAK COMPANY, RAY, LAWRENCE A., C/O EASTMAN KODAK COMPANY
Applicants: EASTMAN KODAK CO, EASTMAN KODAK COMPANY
Application year: 1994
Main classification: G07C9
IPC codes: G06F21, G07F7, G07C9, B42D15, G06K19